openSUSE: Security Advisory for systemd (openSUSE-SU-2020:0208-1)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[ASA-202002-8] systemd: privilege escalation

Arch Linux Security Advisory ASA-202002-8 ========================================= Severity: High Date : 2020-02-12 CVE-ID : CVE-2020-1712 Package : systemd Type : privilege escalation Remote : No Link : https://security.archlinux.org/AVG-1094 Summary ======= The package systemd before version...

Security update for systemd (important)

openSUSE Security Update: Security update for systemd Announcement ID: openSUSE-SU-2020:0208-1 Rating: important References: 1084671 1092920 1106383 1133495 1151377 1154256 1155207 1155574 1156213 1156482 1158485 1159814 1161436 1162108 Cross-References: CVE-2019-20386 CVE-2020-1712 Affected...

CVE-2020-1712

creationtimestamp| type| source ---|---|--- 2020-02-10 15:55:02+00:00| seen| https://t.me/SecLabNews/6843 2020-02-11 00:33:17+00:00| seen| Telegram/1B6IlTx7MGYOXEdIiZRDqO1G2DTuIVDqXNnhCiA-Dal8uIc 2024-10-11 03:23:31+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/601...

Amazon Linux 2 : systemd (ALAS-2020-1388)

The version of systemd installed on the remote host is prior to 219-57. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2020-1388 advisory. A heap use-after-free vulnerability was found in systemd, where asynchronous Polkit queries are performed while handling dbus...

SUSE SLED15 / SLES15 Security Update : systemd (SUSE-SU-2020:0335-1)

This update for systemd fixes the following issues : CVE-2020-1712 bscbsc1162108 Fix a heap use-after-free vulnerability, when asynchronous Polkit queries were performed while handling Dbus messages. A local unprivileged attacker could have abused this flaw to crash systemd services or potentiall...

SUSE SLES12 Security Update : systemd (SUSE-SU-2020:0353-1)

This update for systemd provides the following fixes : CVE-2020-1712 bscbsc1162108 Fix a heap use-after-free vulnerability, when asynchronous Polkit queries were performed while handling Dbus messages. A local unprivileged attacker could have abused this flaw to crash systemd services or...

Ubuntu 16.04 LTS / 18.04 LTS : systemd vulnerabilities (USN-4269-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4269-1 advisory. It was discovered that systemd incorrectly handled certain PIDFile files. A local attacker could possibly use this issue to trick systemd int...

SUSE SLED12 / SLES12 Security Update : systemd (SUSE-SU-2020:0331-1)

This update for systemd fixes the following issues : CVE-2020-1712 bscbsc1162108 Fix a heap use-after-free vulnerability, when asynchronous Polkit queries were performed while handling Dbus messages. A local unprivileged attacker could have abused this flaw to crash systemd services or potentiall...

CVE-2020-1712

A heap use-after-free vulnerability was found in systemd, where asynchronous Polkit queries are performed while handling dbus messages. A local unprivileged attacker can abuse this flaw to crash systemd services or potentially execute code and elevate their privileges, by sending specially crafte...

Medium: systemd

Issue Overview: A heap use-after-free vulnerability was found in systemd, where asynchronous Polkit queries are performed while handling dbus messages. A local unprivileged attacker can abuse this flaw to crash systemd services or potentially execute code and elevate their privileges, by sending...

Cisco IOS XR Software Protocol Independent Multicast Denial of Service Vulnerability

According to its self-reported version, Cisco IOS XR Software is affected by a vulnerability in the Protocol Independent Multicast PIM feature of Cisco IOS XR Software. This could allow an unauthenticated, remote attacker to cause the PIM process to restart, resulting in a denial of service...

CVE-2019-1712 Cisco IOS XR Software Protocol Independent Multicast Denial of Service Vulnerability

A vulnerability in the Protocol Independent Multicast PIM feature of Cisco IOS XR Software could allow an unauthenticated, remote attacker to cause the PIM process to restart, resulting in a denial of service condition on an affected device. The vulnerability is due to the incorrect processing of...

CVE-2019-1712

CVE-2019-1712 is a denial-of-service vulnerability in the Protocol Independent Multicast (PIM) feature of Cisco IOS XR Software. The issue arises from incorrect processing of crafted AutoRP packets, which an unauthenticated, remote attacker can exploit by sending packets to UDP port 496 on a reac...

Security Bulletin: IBM API Connect Developer Portal is vulnerable to Server Side Request Forgery (CVE-2018-1712)

Summary IBM API Connect has addressed the following vulnerability. IBM API Connect Developer Portal is vulnerable to Server Side Request Forgery. An attacker, using specially crafted input parameters can trick the server into making potentially malicious calls within the trusted network...

CVE-2018-1712

IBM API Connect Developer Portal versions 5.0.0.0–5.0.8.3 are vulnerable to Server-Side Request Forgery (SSRF). The vulnerability arises from input parameters that can cause the server to issue requests inside the trusted network. IBM’s Security Bulletin confirms remediation in Version 5.0.8.3 iF...

CVE-2018-6393

FreePBX 10.13.66-32bit and 14.0.1.24 SNG7-PBX-64bit-1712-2 allow post-authentication SQL injection via the order parameter. NOTE: the vendor disputes this issue because it is intentional that a user can "directly modify SQL tables ... or run shell scripts ... once ... logged in to the...

CVE-2018-6393

The CVE-2018-6393 issue affects FreePBX 10.13.66-32bit and 14.0.1.24 (SNG7-PBX-64bit-1712-2). It enables post-authentication SQL injection via the order parameter in the administration interface. The vendor notes it is intentional that a user with access can modify SQL tables or execute shell scr...

CVE-2016-1712

The CVE-2016-1712 issue affects Palo Alto Networks PAN-OS: local privilege escalation due to improper sanitization of the root_reboot local invocation. A local attacker with shell access can escalate privileges. Affected PAN-OS versions include 5.0.18 and earlier; 5.1.11 and earlier; 6.0.13 and e...

Palo Alto PAN-OS Local privilege escalation (PAN-SA-2016-0012)

Palo Alto Networks firewalls do not properly sanitize the rootreboot local invocation which can potentially allow executing code with higher privileges SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...